Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: ubHKe/tGaN8tpJDDaocy9vT56JGK6msrDER6WdSEsxk=
Subject key identifier: 66:41:9C:71:E7:1E:42:08:F9:08:DE:12:45:CA:AF:B9:D5:9A:C0:81
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 01A06DCB745C9881E4788E307AC7421D3C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0D48
Signing time: Fri 04 Sep 2026 19:00:45 +0000
Manifest this update: Fri 04 Sep 2026 19:00:45 +0000
Manifest next update: Sat 05 Sep 2026 19:00:45 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: IM5cm1fC57YetOrhfqL9k/AOHFL9ibKxANXyEQzKST8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:74:5c:98:81:e4:78:8e:30:7a:c7:42:1d:3c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Sep 4 19:00:45 2026 GMT
Not After : Sep 5 19:00:45 2026 GMT
Subject: CN=66419c71e71e4208f908de1245caafb9d59ac081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:8d:01:74:6d:9d:82:6a:8e:7c:00:10:71:
7b:e8:1e:7e:e7:8a:10:21:85:30:c3:0e:ea:e0:00:
b8:2e:b3:1f:48:99:17:c7:63:33:0e:61:8e:df:e0:
7f:dc:99:56:6c:f1:e4:0a:af:7c:fd:d6:a6:7a:ea:
9e:bf:c8:f1:d8:6c:cb:51:c1:f8:10:dc:69:48:0d:
62:4a:ee:d3:1b:90:4c:e5:07:c9:47:ed:b1:de:51:
f1:c6:e3:75:f2:ad:e4:13:c8:40:8a:40:47:24:4b:
25:d9:9d:73:dd:11:4d:92:71:6a:fb:75:bf:56:ca:
92:79:73:3e:80:b6:37:f7:41:7f:58:a2:60:3e:88:
b3:92:7b:a7:d0:24:56:fe:54:e0:df:c6:a3:b6:a4:
87:76:88:de:3d:b2:c4:aa:ca:fc:f8:98:43:91:d4:
d6:1b:78:0f:fe:9d:3a:b5:35:07:75:cb:1f:bc:17:
69:0c:30:5e:c7:a6:ba:1b:f8:5e:30:a5:94:2d:81:
fc:16:74:13:26:a8:7c:d8:bf:f8:ae:6a:d3:24:59:
84:f1:47:f8:9e:3a:1e:84:fc:3e:15:07:9b:3d:4b:
d3:ee:30:6b:7a:de:70:fb:70:6f:30:09:ec:70:44:
f2:04:77:a4:69:3a:6e:a5:80:0f:59:f0:ee:48:9e:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:41:9C:71:E7:1E:42:08:F9:08:DE:12:45:CA:AF:B9:D5:9A:C0:81
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:8f:4e:f8:eb:2e:11:b5:f5:d8:2d:03:e1:24:c2:ba:ad:
19:07:30:46:14:06:1f:90:73:5f:dc:4c:fd:bf:ba:59:e2:f9:
97:67:78:e7:ce:a1:c0:4c:33:3f:ff:7f:02:f5:6f:d2:71:cc:
4f:45:69:6c:82:8a:90:2b:e1:55:9a:77:d0:1d:a4:ad:c3:50:
1d:ae:29:2b:57:76:bb:59:17:1d:c3:41:87:d9:5c:58:c6:eb:
a9:61:62:6e:98:9a:52:89:59:ae:9a:f4:c0:9d:a8:7d:25:15:
6a:f1:46:db:a2:34:df:b9:28:9b:40:ff:96:cb:06:52:0e:45:
0e:a0:83:a8:17:37:5e:3c:21:a8:a6:a8:09:46:27:2a:5c:62:
15:f9:e1:51:6b:1e:8d:cb:da:6a:34:fd:bf:6d:2c:76:5b:fc:
9d:84:4c:6d:79:7a:57:76:db:8e:2e:73:66:9d:5b:1e:29:78:
43:15:ba:1e:cd:c5:a7:fc:50:4c:bd:5c:66:1d:8e:5d:17:46:
23:af:53:51:5d:73:a3:30:35:ff:2e:03:bf:d2:7b:07:db:c0:
17:ff:60:dd:b1:10:d7:0b:fc:dc:12:4e:a8:89:55:1b:af:e4:
da:73:6d:2b:57:d7:e9:41:7f:d0:04:7d:ff:70:47:7a:9e:58:
7d:4e:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:18:57 2026 by rpki-client